Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88783324DAEF11EF982B518F762E951A.roa
File: 88783324DAEF11EF982B518F762E951A.roa (raw, json)
Hash identifier: nPVmzQT5z+2/P87ia0W5DwXl9jST8DXr5mMod3cbIV0=
Subject key identifier: 66:97:0F:86:42:4F:ED:69:00:71:AD:9C:D5:11:2C:63:E6:E8:9E:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88783324DAEF11EF982B518F762E951A.roa
Signing time: Sat 25 Jan 2025 07:39:39 +0000
ROA not before: Sat 25 Jan 2025 07:39:36 +0000
ROA not after: Fri 07 Feb 2025 07:39:36 +0000
asID: 5065
IP address blocks: 154.86.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84203 (0x148eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 07:39:36 2025 GMT
Not After : Feb 7 07:39:36 2025 GMT
Subject: CN=6794953b-a4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0a:21:70:f1:0c:3c:95:a4:94:f0:31:ce:e8:
68:e2:0d:5d:2b:20:28:39:4d:98:d3:ae:17:34:72:
37:07:1d:00:1e:48:39:b9:02:7e:af:07:85:cd:12:
f1:0a:0d:84:90:b5:b7:6e:99:9c:fc:e8:47:96:a6:
0d:d8:fb:8a:a0:64:61:48:02:3f:38:32:ab:eb:a7:
58:ad:d0:02:43:23:85:f1:2e:bb:14:1a:22:1e:35:
8c:38:02:60:42:ad:39:83:86:65:fc:d2:25:16:06:
39:3a:9a:6b:05:3f:b2:57:7b:f2:4f:7a:71:c4:68:
43:03:b7:33:f2:4c:9d:89:6d:68:5e:02:92:c0:a6:
bd:dd:b3:e7:f1:fe:6d:77:99:8d:4d:7c:67:e8:a6:
cb:d3:2e:28:37:bc:08:df:48:97:ec:7d:1a:bd:fa:
94:82:d9:33:29:d6:d9:23:9f:5d:6b:9b:63:13:45:
c2:9a:ae:7f:23:17:3b:21:af:02:3c:c2:18:9e:8b:
b2:7b:ae:b9:3a:5e:ec:a5:77:3f:6a:61:81:c6:5c:
88:e0:4e:01:8e:00:c8:bb:7c:70:61:53:49:bb:ef:
20:c3:77:35:9a:54:50:98:bd:d7:2a:57:7f:34:86:
36:5f:4b:7f:fe:d6:b4:d8:1e:4a:e5:07:9b:9a:69:
c0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:97:0F:86:42:4F:ED:69:00:71:AD:9C:D5:11:2C:63:E6:E8:9E:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88783324DAEF11EF982B518F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.8.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ad:00:d3:aa:8a:50:b5:78:28:1b:95:de:a3:a8:65:64:06:
54:d9:35:50:23:95:ea:74:7b:d6:90:06:bc:84:fc:c1:53:4e:
0a:0b:b3:69:c2:3d:7c:73:7c:fa:83:a6:70:2e:dc:03:cc:e9:
d1:d0:e3:81:04:14:80:f7:af:1b:ac:af:c3:67:44:6b:5f:89:
43:0f:58:91:ed:eb:cc:40:4c:d3:ed:de:03:34:c1:ed:08:06:
47:ef:d4:f0:f6:26:ce:ca:7d:91:aa:ec:df:00:f3:84:8d:a3:
67:15:00:89:2a:b8:6b:66:34:c8:31:6c:5b:f7:5d:90:67:b7:
7f:86:4b:1b:31:cd:92:c2:e6:c9:1a:0c:be:1c:3c:bb:41:d9:
76:c7:87:c2:04:46:bb:aa:de:cf:ab:3a:a1:22:36:2f:73:91:
7c:ce:c0:5d:72:35:ee:59:4f:db:e0:95:f1:ce:c6:06:e6:66:
7a:82:33:ba:d2:cd:7b:f1:d6:cf:d0:ee:3a:1e:a1:56:cf:48:
0d:f0:56:67:f9:43:ff:62:bc:6b:6d:9f:62:dd:d2:dc:88:cb:
0d:82:cb:ba:fe:27:2f:cc:18:99:1d:8d:ed:fb:6a:f7:48:86:
08:e2:c7:79:47:52:71:25:14:f9:e8:f8:25:a8:a2:16:c4:4b:
36:8d:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:05:55 2025 by rpki-client